CVE-2012-0367: Cisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2 allows remot...

Security readout for executives and security teams

CVE-2012-0367 is a Cisco Unity Connection denial-of-service issue. A remote attacker could crash services by sending crafted TCP traffic. For executives, the business risk is interruption to voicemail or unified messaging, especially where legacy Cisco Unity Connection systems remain reachable from untrusted networks. Exposure is most likely in organizations still operating affected Cisco Unity Connection releases. Risk is higher if the service accepts TCP traffic from untrusted networks. The source bundle does not identify specific ports, deployment defaults, or internet exposure patterns. Prioritize remediation where Cisco Unity Connection supports critical communications or is reachable from broad networks. This is not evidenced as actively exploited, but a remotely triggerable service crash can still create meaningful business disruption. Mitigation focus: Upgrade Cisco Unity Connection to the fixed versions named by Cisco.; Review the Cisco advisory for version-specific upgrade guidance.; Restrict untrusted network access to Unity Connection services..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.